rapidapi
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities mostly align, and there is no download/execute behavior. However, it sends both user query data and the RAPIDAPI_KEY through RapidAPI proxy endpoints to third-party scraper providers rather than official Google Flights or Booking.com APIs, and the referenced publisher details appear inconsistent. This is a coherent marketplace integration but carries medium trust and data-flow risk.
Confidence: 88%Severity: 56%
Audit Metadata